Privacy Policy

This Privacy Policy ("Policy") is issued by Win96 ("the Company", "we", "us", "our") in respect of the online gambling platform operated at https://win96.cam ("the Platform"). It sets out how we collect, use, store, share, and protect the personal data of individuals ("Players", "you", "your") who register for, access, or otherwise interact with the Platform.

Win96 operates the Platform for the benefit of Malaysian players and users across Southeast Asia. We recognise that privacy is a fundamental right and that our players trust us with sensitive personal and financial information. This Policy reflects our commitment to handling that information with the care, transparency, and respect it deserves.

By creating an account on the Platform or otherwise providing personal data to us, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform and should contact us to close your account.

This Policy is incorporated into and must be read alongside our Terms and Conditions and Responsible Gambling Policy. Where this Policy conflicts with the Terms and Conditions on a privacy matter, this Policy prevails.

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person — including name, identification number, contact details, financial information, or online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, Win96.
• "Data Processor" means any third party that processes Personal Data on behalf of Win96 under contract and under our instruction.
• "Consent" means a freely given, specific, informed, and unambiguous indication of a Player's agreement to the processing of their Personal Data for a stated purpose.
• "KYC" means Know Your Customer — the identity and address verification process required before withdrawals may be processed.
• "Sensitive Data" means a special category of Personal Data that warrants heightened protection, including government identification numbers and financial account details.
• "Third Party" means any natural or legal person other than the Player and Win96 — including payment processors, KYC service providers, and analytics partners.

Win96 acts as the Data Controller in respect of Personal Data collected through the Platform. As Data Controller, Win96 determines the purposes for which your Personal Data is processed and the means by which that processing takes place.

Where Win96 engages third-party service providers to process Personal Data on its behalf, those providers act as Data Processors and are contractually bound to process data only on Win96's instructions, in accordance with this Policy, and in compliance with applicable data protection legislation.

Win96 collects Personal Data through a number of channels, including account registration, payment processing, gameplay activity, customer support interactions, and automated technical systems. The categories of Personal Data we collect are detailed in the table below.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data except where specifically required and authorised under applicable law (for example, in connection with responsible gambling assessments).

Win96 processes your Personal Data only where a lawful basis exists under applicable data protection law. The lawful bases we rely upon are:

• Contractual Necessity: Processing required to perform the contract between Win96 and the Player — including account management, payment processing, KYC verification, game provision, and withdrawal processing.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements — including anti-money laundering (AML) legislation, responsible gambling obligations, and fraud prevention mandates.
• Legitimate Interests: Processing necessary for Win96's legitimate business interests where those interests are not overridden by the Player's fundamental rights — including fraud detection, security monitoring, platform performance improvement, and analytics.
• Consent: Processing based on your freely given, specific, and informed consent — including the sending of marketing communications and the use of non-essential analytics cookies. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

Win96 processes Personal Data for the following specific purposes:

6.1 Account Management

We process Identity Data and Contact Data to create, manage, and maintain your Player Account, to authenticate your identity at login, and to communicate with you regarding account-related matters such as security alerts, policy updates, and transaction confirmations.

6.2 Payment Processing

We process Financial Data and Identity Data to facilitate deposits and withdrawals through supported Malaysian payment channels including Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, BTC, and USDT. All financial transactions are denominated in Malaysian Ringgit (MYR).

6.3 Identity Verification (KYC)

We process KYC Documentation and Identity Data to verify the identity and age of Players prior to withdrawal, in compliance with our anti-money laundering obligations and our commitment to preventing underage gambling. KYC documentation is handled through secure, encrypted systems and is accessed only by authorised personnel.

6.4 Fraud Prevention and Security

We process Technical Data, Financial Data, and Gameplay Data to detect, investigate, and prevent fraudulent activity, money laundering, account takeover, and other security threats. This processing is conducted in the legitimate interests of Win96 and its players.

6.5 Regulatory Compliance

We process Personal Data as required to satisfy our obligations under applicable laws and regulations, including requirements to maintain transaction records, respond to lawful requests from regulatory bodies, and comply with international AML and counter-terrorism financing standards.

6.6 Responsible Gambling

We process Gameplay Data and account-level behavioural data to monitor for indicators of problem gambling, to apply responsible gambling tools (deposit limits, self-exclusion) where requested, and to fulfil our duty of care obligations to Players. This processing is conducted in the legitimate interests of player protection.

6.7 Platform Improvement and Analytics

With your consent or where justified under legitimate interests, we process Technical Data and Gameplay Data in anonymised or aggregated form to improve the Platform's performance, identify technical issues, and inform product development decisions. No individually identifiable data is used for analytics purposes beyond what is necessary.

6.8 Customer Support

We process Communications Data and relevant Account Data to respond to enquiries, resolve disputes, and deliver customer support services in English, Bahasa Melayu, and Chinese through live chat, email, and other supported channels.

Win96 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We share Personal Data only in the circumstances described below.

7.1 Service Providers (Data Processors)

We engage trusted third-party service providers to support the operation of the Platform. These providers process Personal Data only under our instruction and are bound by contractual data processing agreements. Categories of service provider include:

• Payment processors and e-wallet operators (to facilitate MYR transactions via Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, and others);
• KYC and identity verification service providers;
• Cloud hosting and infrastructure providers;
• Fraud detection and cybersecurity providers;
• Customer support software providers;
• Analytics and performance monitoring tools (subject to consent where applicable).

7.2 Legal and Regulatory Disclosures

We may disclose Personal Data to law enforcement agencies, regulatory authorities, courts, or other competent bodies where required to do so by applicable law, court order, or regulatory direction, or where disclosure is necessary to protect the rights, property, or safety of Win96, its players, or the public.

7.3 Business Transfers

In the event that Win96 undergoes a corporate restructuring, merger, acquisition, or sale of assets, Personal Data held by the Company may be transferred to a successor entity as part of that transaction. Players will be notified of any material change in data controllership in advance where required by applicable law.

Win96 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required to satisfy legal, regulatory, or contractual obligations. The following retention principles apply:

• Active Account Data: Retained for the duration of the Player's account registration and active use of the Platform.
• KYC and Identity Documentation: Retained for a minimum of five years following account closure or the last transaction, in compliance with applicable anti-money laundering legislation.
• Financial Transaction Records: Retained for a minimum of seven years following the date of transaction, in accordance with financial record-keeping obligations.
• Customer Support Records: Retained for a minimum of three years from the date of the interaction, or longer if the matter is the subject of ongoing dispute or investigation.
• Marketing Preferences and Consent Records: Retained for as long as necessary to demonstrate compliance with consent requirements, and for a minimum of two years following any consent withdrawal.
• Technical and Log Data: Typically retained for up to 12 months, unless a longer retention period is required for security investigation or fraud prevention purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents recovery or re-identification.

Win96 implements a comprehensive suite of technical and organisational security measures to protect Personal Data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes the following measures:

• 256-bit SSL/TLS Encryption: All data transmitted between Players and the Platform is encrypted using industry-standard SSL/TLS protocols, protecting data from interception during transmission.
• Access Controls: Access to Personal Data held by Win96 is restricted on a strict need-to-know basis. Employee access is role-based, logged, and subject to regular review.
• Secure Data Storage: Personal Data is stored on access-controlled servers with physical and logical security measures in place. Storage systems undergo regular security audits.
• Two-Factor Authentication (2FA): Available and encouraged for all Player accounts to reduce the risk of unauthorised account access.
• Intrusion Detection Systems: Automated monitoring systems detect and alert to suspicious access patterns and potential security incidents in real time.
• Regular Security Assessments: Win96 conducts periodic vulnerability assessments and penetration testing to identify and remediate security weaknesses proactively.
• Staff Training: All staff with access to Personal Data receive regular training on data protection obligations and security best practices.

Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed to be entirely secure. In the event of a data breach that poses a risk to the rights and freedoms of Players, Win96 will notify affected Players and relevant authorities in accordance with applicable legal requirements.

The Platform uses cookies and similar tracking technologies to enhance functionality, maintain session security, and — where you have consented — to gather analytics data that helps us improve the Platform experience.

10.1 Essential Cookies

These cookies are strictly necessary for the Platform to function correctly. They enable core features such as session management, authentication, security, and payment flow. Essential cookies cannot be disabled without impairing Platform functionality. No consent is required for their use.

10.2 Functional Cookies

These cookies remember your preferences (such as preferred language — English, Bahasa Melayu, or Chinese — and display settings) to provide a more personalised experience. Disabling these cookies may affect the quality of your experience on the Platform.

10.3 Analytics Cookies

With your consent, we use analytics cookies to collect anonymised information about how Players use the Platform — including pages visited, time spent, and features used. This data is used in aggregate form to improve Platform performance and content. You may withdraw consent for analytics cookies at any time through your browser settings.

10.4 Managing Cookies

You may control and delete cookies through your web browser settings. Most modern browsers allow you to view, block, or delete cookies individually or by category. Detailed instructions are available through your browser's help documentation. Please note that disabling essential cookies will affect your ability to use the Platform.

Subject to applicable law, you have the following rights in respect of your Personal Data held by Win96. You may exercise any of these rights by contacting us at [email protected] with the subject line "Privacy Request".

We will respond to all data rights requests within 30 calendar days of receipt. Where a request is complex or we receive a high volume of requests, we may extend this period by up to a further 60 days, in which case we will notify you of the extension and the reason for it. We will never charge a fee for handling a rights request unless the request is manifestly unfounded, excessive, or repetitive.

In the course of providing the Platform and associated services to Players in Malaysia, Win96 may transfer Personal Data to, or process it in, countries outside Malaysia. This may occur where our third-party service providers — such as cloud hosting partners, KYC providers, or payment processors — operate infrastructure in other jurisdictions.

Where Personal Data is transferred internationally, Win96 ensures that appropriate safeguards are in place to protect such data to a standard equivalent to the protections afforded under applicable Malaysian data protection legislation and international best practice. Safeguards employed may include:

• Standard contractual clauses agreed with the receiving entity;
• Binding corporate rules where applicable;
• Transfers to jurisdictions recognised as providing an adequate level of data protection; or
• Other legally recognised transfer mechanisms as appropriate.

Players may request further information about the specific safeguards governing any international transfer of their Personal Data by contacting us at [email protected].

The Platform is strictly intended for individuals aged 21 years and above. Win96 does not knowingly collect or process Personal Data relating to individuals under the age of 21. Our account registration process includes an age declaration and is subject to KYC age verification to enforce this requirement.

If Win96 becomes aware that Personal Data has been collected from a person under the age of 21, we will take immediate steps to delete such data from our systems and close the associated Account. Deposits made by underage individuals will be returned in full; any winnings generated will be forfeited.

If you believe that Personal Data of a person under the age of 21 has been submitted to the Platform, please contact us immediately at [email protected] so that we may investigate and take appropriate action without delay.

With your explicit consent, Win96 may contact you from time to time with information about promotions, bonuses, new games, sporting events (including Liga Super Malaysia fixtures, EPL, and UFC events), and other Platform updates that we believe may be of interest to you.

You have the right to opt out of marketing communications at any time. You may do so by:

• Updating your communication preferences in your Account settings;
• Clicking the "unsubscribe" link included in any marketing email; or
• Contacting our support team via live chat or email at [email protected].

Opting out of marketing communications will not affect your receipt of transactional or service-related communications such as deposit confirmations, withdrawal notifications, security alerts, or policy update notices. These communications are sent on the basis of contractual necessity and cannot be opted out of while your Account remains active.

Win96 does not engage in unsolicited bulk marketing (spam). We send marketing communications only to Players who have positively opted in and only through the channels they have indicated as acceptable.

Win96 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material, we will provide reasonable advance notice by displaying a notice on the Platform and, where appropriate, notifying registered Players by email.

The "Last Updated" date at the top of this page indicates when this Policy was most recently revised. We encourage Players to review this Policy periodically to stay informed about how we are protecting their Personal Data.

Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the changes. If you do not agree with any amendment, you should stop using the Platform and may request account closure in accordance with our Terms and Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please contact us through any of the following channels:

Privacy & Data Enquiries:
[email protected]
Please use the subject line: "Privacy Request — [Your Request Type]"

Live Chat Support:
Available 24 hours a day, 7 days a week via the chat icon on the Platform. Available in English, Bahasa Melayu, and Chinese. Average response time under 5 minutes.

We aim to acknowledge all privacy-related enquiries within 3 business days and to resolve them fully within 30 calendar days. For complex requests, we may require up to 60 additional days and will inform you accordingly.

This Privacy Policy was last reviewed on 1 January 2026. The most current version is always available at win96.cam/privacy-policy.